Released in April 2005

Made in China

more versions

Client:
port: 2005 TCP




Server:
dropped file:
c:\WINNT\system32\TrojanS_P.exe
size: 25,600 bytes 

port: 1120 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Trojan"
data: C:\WINNT\system32\TrojanS_P.exe 



tested on Windows 2000
June 01, 2005